You don't need to bother with a script. Just set the CA to run the installed EXE and add the switch. Having said that, for recalcitrant EXEs, I have a script which executes the relevant EXE with the switch and then checks that the relevant registry entries were created.